Vulnerabilidades do Mercku M6a
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Mercku M6a: 5 registro(s), com versões afetadas e correções.
CVE-2025-62775
Alta · 8.0
CWE-669 22/10/2025
Incorrect Resource Transfer Between Spheres em Mercku M6a
Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password.
CVE-2025-62774
Baixa · 3.1
CWE-331 22/10/2025
On Mercku M6a devices through 2.1.0, the authentication system uses predictable session…
On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps.
CVE-2025-62773
Baixa · 2.4
CWE-912 22/10/2025
Mercku M6a devices through 2.1.0 allow TELNET sessions via a…
Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator.
CVE-2025-62772
Baixa · 3.1
CWE-305 22/10/2025
On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in…
On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.
CVE-2025-62771
Alta · 7.5
CWE-352 22/10/2025
Cross-Site Request Forgery (CSRF) em Mercku M6a
Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks.